Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2017-07-26
High
WebKit WebCore::RenderSearchField::addSearchResult Heap Buffer Overflow
 CVE CWE Remote ifratric
2017-07-25
High
ManageEngine Desktop Central 10 Build 100087 Remote Code Execution
 CVE Remote Kacper Szurek
High
WebKit JSC JSArray::appendMemcpy Uninitialized Memory Copy
 CVE Remote lokihardt
High
WebKit JSC JSObject::putInlineSlow & JSValue::putToPrimitive XSS
 CVE CWE Remote lokihardt
High
WebKit JSC ArgumentsEliminationPhase::transform Incorrect LoadVarargs Handling
 CVE Remote lokihardt
High
WebKit WebCore::InputType::element Use-After-Free
 CVE Remote ifratric
High
WebKit WebCore::Node::getFlag Use-After-Free
 CVE Remote ifratric
High
WebKit WebCore::RenderObject Use-After-Free
 CVE Remote ifratric
High
WebKit WebCore::Node::nextSibling Use-After-Free
 CVE Remote ifratric
High
WebKit WebCore::AccessibilityNodeObject::textUnderElement Use-After-Free
 CVE Remote ifratric
High
WebKit WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free
 CVE Remote ifratric
High
WebKit WebCore::getCachedWrapper Use-After-Free
 CVE Remote ifratric
High
Microsoft Internet Explorer MS17-007 mshtml.dll Remote Code Execution
 CVE Remote Mohamed Hamdy
High
Samba - Remote code execution from a writable share
 CVE Remote Informacion - Anonymou...
2017-07-23
Low
Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS
 CVE CWE Remote Owais
2017-07-22
Med.
Razer Synapse rzpnk.sys ZwOpenProcess
 CVE Local Spencer
2017-07-19
Med.
Hashicorp vagrant-vmware-fusion 4.0.20 Privilege Escalation
 CVE CWE Local Mark Wadham
Low
PEGA Platform 7.2 ML0 Missing Access Control / Cross Site Scripting
 CVE CWE Remote Daniel Correa
High
DotCMS 4.1.1 Shell Upload
 CVE CWE M3@pandas
2017-07-18
High
Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection
 CVE CWE Remote xort
2017-07-16
Med.
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
 CVE Remote MaXe
2017-07-14
Med.
Microsoft Windows COM Session Moniker Privilege Escalation
 CVE CWE Remote forshaw
Low
Skype for Business 2016 Cross-Site Scripting
 CVE Remote TrustedSec
2017-07-13
Med.
iSmartAlarm Backend Server-Side Request Forgery
 CVE Remote Ilia Shnaidman
Med.
iSmartAlarm CubeOne Missing SSL Certificate Validation
 CVE Remote Ilia Shnaidman
2017-07-12
Med.
VMware Horizons macOS Client Code Injection
 CVE CWE Local Florian Bogner
Low
ObjectPlanet Opinio 7.6.3 Cross Site Scripting
 CVE CWE Remote Kasper Karlsson
2017-07-11
High
NfSec 1.3.7 / AlienVault USM/OSSIM 5.3.4 Command Injection
 CVE CWE Remote Paul Taylor
High
NfSec 1.3.7 / AlienVault USM/OSSIM 5.3.6 Local Root
 CVE Local Paul Taylor
High
NfSen <= 1.3.7 / AlienVault OSSIM 5.3.4 - Command Injection
 CVE CWE Remote Paul Taylor
2017-07-08
Low
Apache Solar 5.5.4 / 6.5.1 Member Spoofing
 CVE Remote The Lucene PMC
Med.
EMC ESRS Policy Manager Undocumented Account
 CVE Remote Travis Emmert
2017-07-07
High
Yaws v1.91 Web Server Unauthenticated Remote File Disclosure
 CVE Remote hyp3rlinx
2017-07-05
High
GoAutoDial 3.3 Authentication Bypass / Command Injection
 CVE CWE Remote Chris McCurley
High
Struts 2 DefaultActionMapper RCE Exploit S2-016 [Python]
 CVE Remote Jonatas Fil
2017-07-04
Low
Humax Digital HG100R 2.0.6 XSS / Information Disclosure
 CVE CWE Remote The Gambler
Low
DoorGets CMS 7.0 Open Redirect
 CVE CWE Remote Rudra Sarkar
Low
Webmin 1.840 Cross Site Scripting
 CVE CWE Remote Andy Tan
2017-07-03
High
BOA Web Server 0.94.14rc21 - Arbitrary File Access
 CVE Remote Miguel Mendez Z
Med.
Royal Custom CMS Admin Login Bypass upload sh3ll
 CVE CWE Remote iranonymous
2017-07-02
Med.
Schneider Electric Wonderware InduSoft Web Studio 8.0 Patch 3 Insecure Permissions
 CVE CWE Local Karn Ganeshen
High
OSCI-Transport Library 1.2 Padding Oracle / Signature Wrapping / XXE Injection
 CVE SEC Sonsult
High
Digital Canal Structural Wind Analysis 9.1 Buffer Overflow
 CVE CWE Local Karn Ganeshen
2017-07-01
Low
Trihedral VTScada DoS / XSS / Information Disclosure
 CVE CWE Remote Karn Ganeshen
High
Humax HG100R 2.0.6 Backup File Download
 CVE Remote gambler
2017-06-30
High
ActiveMQ < 5.14.0 web shell upload
 CVE CWE Remote Ian
High
Veritas/Symantec Backup Exec - SSL NDMP Connection Use-After-Free
 CVE Remote Anonymous
2017-06-29
Med.
Kaspersky Anti-Virus File Server 8.0.3.297 XSS / CSRF / Code Execution
 CVE CWE Remote CORE
Med.
Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities
 CVE CWE Local CORE
Med.
Oracle Solaris 11.1 / 11.3 RSH Local Root Stack Clash Exploit
 CVE Local Qualys
Med.
OpenBSD 'at' Local Root Stack Clash Exploit
 CVE Local Qualys
Med.
NetBSD Stack Clash Proof of Concept
 CVE Local Qualys
Med.
FreeBSD 'FGPU' Stack Clash Proof of Concept
 CVE Local Qualys
Med.
FreeBSD 'setrlimit' Stack Clash Proof of Concept
 CVE Local Qualys
Med.
FreeBSD 'FGPE' Stack Clash Proof of Concept
 CVE Local Qualys
Med.
Linux 'ldso_dynamic' Local Root Stack Clash Exploit
 CVE Local Qualys
Med.
Linux 'ldso_hwcap_64' Local Root Stack Clash Exploit
 CVE Local Qualys
Med.
Linux 'ldso_hwcap' Local Root Stack Clash Exploit
 CVE Local Qualys
Med.
Linux 'offset2lib' Stack Clash Exploit
 CVE Local Qualys
2017-06-28
Med.
GLPI 0.90.4 SQL Injection
 CVE CWE Remote Eric CARTER
Copyright 2017, cxsecurity.com